The first login is at the Windows server (maybe AD).
The second one, will check the userid and password.
You can try section accesss with only access and ntname.(Please, make a backup before trying).
Or you can use section acess as you did, but create some lines with userID and password as blanks if you don't want the users to get a second login
(don't forget the backups )